threat/intelligence

Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

CVE-2026-118539CRITICAL

Drupal Commerce Core access bypass (CVE-2026-118539) exploited to place fraudulent orders

Unauthenticated access bypass in Drupal Commerce Core (SA-CONTRIB-2026-254) exploited for fraudulent orders; fixed in 3.3.13 and 8.x-2.41.

Updated 2026-11-09

Chain dossiers

No published chain dossiers match these filters.